$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.mft File: 9NCKHhy8kJJU6ea5yTn9haJoseE.mft (raw, json) Hash identifier: wyQ7i3WGVU5GPHW5o7eskyOrgHlzrsGCObclLgBW5PE= Subject key identifier: C0:7E:D7:BA:46:B8:2A:9B:F0:EE:2B:B0:69:6E:74:10:49:A6:46:20 Authority key identifier: F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1 Certificate issuer: /CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1 Certificate serial: 01A0CF35E41699C00F9C960B667B9FA01358 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.mft Manifest number: 1771 Signing time: Wed 23 Sep 2026 17:00:10 +0000 Manifest this update: Wed 23 Sep 2026 17:00:10 +0000 Manifest next update: Thu 24 Sep 2026 17:00:10 +0000 Files and hashes: 1: 1uEYEr4aUEIS5erchF-G3_love8.roa (hash: zNpv/vmV75AmB5KpVV8l8ngcfpgQVlAN2sGn4iX8/ng=) 2: 3w7QKsP-nBdjzBOchAjI61TTv2M.roa (hash: QyB/DzhD3cYZvTNAg8B4G4w4oEF1E2vw8LoHS76oVRY=) 3: 9NCKHhy8kJJU6ea5yTn9haJoseE.crl (hash: IIbNYFYdvs1D/w0zaALqLiRjp0rMC1VTDccSB7WLzuM=) 4: E33BupXnwP12_IF4jZwLlg0xD4w.roa (hash: 0NACigb3EWqFP6STcn//yzpEwV+siLe8SJdsoWQ96Y8=) 5: GEIKFkgfp6_eIqRvCuYJD-vtDrg.roa (hash: lwzwGD8UECsEevl2wRnqOwDSfVvfj8CLyePijoTaj1Q=) 6: HW_hkEfvkCc_Nbd1XrvVgG6W_mc.roa (hash: hJtEY+ViaHHrE6ovlwWbn8ahLz2qGrhOtEFfqEUoIIE=) 7: I0x4Z-Xx3L5jydy9aoZ7XgF5QNg.roa (hash: JlSlaBzAXyXquY82elhNPJ3+qyBoK5BR21f4eeFhqKI=) 8: IPeiMehm6QECFC52RY0apIXHDNU.roa (hash: 8ANVC/sDEWhLrwoJ9ZsQK2bdvdAuXXAuDwW/JPfEUMw=) 9: OY7VggLlS6S8taEQZwxA_9MJ9Jc.roa (hash: hj2ioa7d+yEki0gbVFILdu22LUXQHhfHdLKTOV3RU+k=) 10: QK12BT5JU0njlnUjcvy2nll9ISw.roa (hash: ueRt97cwc8ElR5smVKqO5aokOBz+HYbbrwTAOsyMRGg=) 11: W-LFdXJpQLdmO9rIYC8JOFXBGas.roa (hash: iUdq2UMzKZOkLskYtT6LwMXoPeIpp0LviydmXs6dcHA=) 12: hkJU0HHWf1-4JqWwATl5ZFWfJyc.roa (hash: VDA82OVX/X2yLRwyOfMgqYUT2szuVZcwdV7SJXAxuuQ=) 13: lTN9WM_3kAIwHlpaUspavss4Il0.roa (hash: HHix3BfeZ1Pqtr5dBucc6Su9pPLjQX4ABrsZY3uNeNA=) 14: nM0fT2qGFIY-E7YXz-VIDNKzo6g.roa (hash: 6H3JuqjFe5vPc22lKrJFxNe7X2kqJ2+u4oq5uX5FAp4=) 15: ppxL-JyBnLIGugzsw08md5QRsxg.roa (hash: +phpwkg3kcNrCj/VJvMVw3i6In/xr7LehwojIFYPMKg=) 16: r3qIFL64zBjpZJnS493yx0oryZk.roa (hash: 8MocfFSSFr7GFC7FeOm+9FTF4c9hg7BslJ3kzykAfTs=) 17: tJlaTHgStBVLlJKHBUxS_V9A-YY.roa (hash: ezIOIeTnDODny04gsbWcse31DfWyx6mg8AHZtHJ4iMk=) 18: wyfjlnYky-rnBOXT5ZHjb0J-F9I.roa (hash: XfYB9CaI2N46qtcZ6v9uIjhl1/e0d3UrGQvPezeGBLw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.crl rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.mft rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Sep 2026 14:12:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:cf:35:e4:16:99:c0:0f:9c:96:0b:66:7b:9f:a0:13:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1 Validity Not Before: Sep 23 17:00:10 2026 GMT Not After : Sep 24 17:00:10 2026 GMT Subject: CN=c07ed7ba46b82a9bf0ee2bb0696e741049a64620 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:84:7a:84:dc:e9:03:50:95:c6:4a:60:73:94: 82:94:f6:ae:ca:46:13:c5:76:b3:0d:f0:ca:d4:06: 0e:8e:aa:29:27:8a:91:2a:bc:fa:99:b0:47:6c:ee: b1:0c:5a:d1:7f:e3:6a:d7:50:a5:5f:06:1b:af:e2: 80:49:b3:d6:9d:2c:a8:74:d5:e5:3f:bb:9a:a8:9e: a3:53:3e:14:c0:68:b6:79:1f:a6:e7:4a:e3:4f:a0: d2:61:dc:fd:45:84:13:02:e1:49:b1:53:f2:6c:79: 3f:4a:0d:05:59:bb:f9:02:cf:e2:dd:a7:a4:96:43: 24:f1:61:ef:15:07:0a:67:90:ce:71:7a:67:2f:cf: 68:80:a9:90:66:52:82:e6:e2:53:18:a9:4f:d6:c8: 01:27:02:fc:95:80:c4:09:3a:c4:70:3f:33:5e:1e: fb:e5:95:53:dd:c6:53:ba:73:4f:1a:bd:b8:bf:13: a4:bc:b4:cc:b0:9f:d9:8e:b8:36:dc:e9:2e:cc:a5: 46:1f:d6:23:1d:8f:9d:3f:94:1a:b1:55:7e:e8:71: 34:53:ab:2c:ad:4f:14:74:e9:e3:ac:84:96:aa:ff: 8b:ed:7b:59:62:64:dd:2a:48:38:59:20:6c:22:65: 77:83:ed:40:5b:05:85:41:1b:0e:16:12:26:e8:a6: f7:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:7E:D7:BA:46:B8:2A:9B:F0:EE:2B:B0:69:6E:74:10:49:A6:46:20 X509v3 Authority Key Identifier: keyid:F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:95:3b:98:ba:0f:b6:1f:17:3a:42:2b:08:97:12:8f:e9:2c: 16:33:9e:16:b4:03:c7:36:46:80:3a:92:08:d5:69:bb:d0:dd: 2f:57:8c:10:43:42:e2:04:7c:02:f6:cc:39:0b:93:8a:56:18: 49:81:19:1c:db:d0:36:8d:02:1e:b4:ce:51:55:ea:32:b3:eb: 55:a7:7b:1f:0c:b9:9d:ee:fe:f1:74:f3:87:07:50:6a:e0:d8: be:a2:56:a9:66:d3:b0:37:2f:01:f9:2e:95:7f:97:ea:05:62: 97:7d:c9:a9:0a:88:37:db:d1:37:27:69:99:f3:11:19:93:b8: a4:f4:98:47:63:32:c9:8f:64:ae:27:f6:70:ce:5d:71:b4:3a: ba:9b:96:75:1b:4e:79:1f:9d:53:07:37:12:6f:d6:78:80:31: f7:ba:46:ec:c2:82:83:7c:33:17:80:ce:d4:98:ac:39:57:ed: 89:f8:ce:3f:56:46:a4:6d:d6:49:b9:8f:30:25:e1:eb:ac:37: d4:ee:dc:17:d0:43:00:44:c7:ae:7f:28:da:41:c5:ee:88:0d: e0:b8:2e:95:ec:e4:ea:3b:87:d3:88:9f:75:92:0d:0b:d9:1f: bc:7e:94:e2:db:57:0f:cd:8e:ec:1e:e9:85:ac:a5:06:e8:df: 3d:1c:60:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDPNeQWmcAPnJYLZnufoBNYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0ZDA4YTFlMWNiYzkwOTI1NGU5ZTZiOWM5MzlmZDg1YTI2 OGIxZTEwHhcNMjYwOTIzMTcwMDEwWhcNMjYwOTI0MTcwMDEwWjAzMTEwLwYDVQQD EyhjMDdlZDdiYTQ2YjgyYTliZjBlZTJiYjA2OTZlNzQxMDQ5YTY0NjIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7oR6hNzpA1CVxkpgc5SClPauykYT xXazDfDK1AYOjqopJ4qRKrz6mbBHbO6xDFrRf+Nq11ClXwYbr+KASbPWnSyodNXl P7uaqJ6jUz4UwGi2eR+m50rjT6DSYdz9RYQTAuFJsVPybHk/Sg0FWbv5As/i3aek lkMk8WHvFQcKZ5DOcXpnL89ogKmQZlKC5uJTGKlP1sgBJwL8lYDECTrEcD8zXh77 5ZVT3cZTunNPGr24vxOkvLTMsJ/Zjrg23OkuzKVGH9YjHY+dP5QasVV+6HE0U6ss rU8UdOnjrISWqv+L7XtZYmTdKkg4WSBsImV3g+1AWwWFQRsOFhIm6Kb3VQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMB+17pGuCqb8O4rsGludBBJpkYgMB8GA1UdIwQY MBaAFPTQih4cvJCSVOnmuck5/YWiaLHhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOU5DS0hoeThrSkpVNmVhNXlUbjloYUpvc2VFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NDlmZGMtMGQzYS00MWVjLWExY2Ut ZGNlOTQ3ZTI5NGI2LzEvOU5DS0hoeThrSkpVNmVhNXlUbjloYUpvc2VFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi82NDlmZGMtMGQzYS00MWVjLWExY2UtZGNlOTQ3ZTI5NGI2 LzEvOU5DS0hoeThrSkpVNmVhNXlUbjloYUpvc2VFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFJU7mLoP th8XOkIrCJcSj+ksFjOeFrQDxzZGgDqSCNVpu9DdL1eMEENC4gR8AvbMOQuTilYY SYEZHNvQNo0CHrTOUVXqMrPrVad7Hwy5ne7+8XTzhwdQauDYvqJWqWbTsDcvAfku lX+X6gVil33JqQqIN9vRNydpmfMRGZO4pPSYR2MyyY9krif2cM5dcbQ6upuWdRtO eR+dUwc3Em/WeIAx97pG7MKCg3wzF4DO1JisOVftifjOP1ZGpG3WSbmPMCXh66w3 1O7cF9BDAETHrn8o2kHF7ogN4Lgulezk6juH04ifdZINC9kfvH6U4ttXD82O7B7p haylBujfPRxgXA== -----END CERTIFICATE-----Generated at Wed Sep 23 22:27:29 2026 by rpki-client